Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Sep 2004 11:38:47 +0200
From:      "Daniel Eriksson" <daniel_k_eriksson@telia.com>
To:        "'Robert Watson'" <rwatson@freebsd.org>
Cc:        current@freebsd.org
Subject:   RE: FreeBSD 5.3 Bridge performance take II
Message-ID:  <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0VcX9IoJqUaXPS8MjT1PdsKAAAAQAAAAgcC6P5K6r0GGsZ6hnDUsHgEAAAAA@telia.com>
In-Reply-To: <Pine.NEB.3.96L.1040908181306.61174F-100000@fledge.watson.org>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Robert Watson wrote:

> If you're not already disabling harvesting of entropy on interrupts and
> in network processing, you really want to for performance purposes.

How do I disable this without causing entropy starvation for "typical" use
cases (ssl? ssh?)? I googled a bit and found nothing at all about how to
disable excessive harvesting.

# sysctl -a | grep harvest
kern.random.sys.harvest.ethernet: 1
kern.random.sys.harvest.point_to_point: 1
kern.random.sys.harvest.interrupt: 1
kern.random.sys.harvest.swi: 0

These are the knobs I know about. Is it enough to turn
kern.random.sys.harvest.ethernet and kern.random.sys.harvest.interrupt to 0,
or are there other things I need to do too?

/Daniel Eriksson




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0VcX9IoJqUaXPS8MjT1PdsKAAAAQAAAAgcC6P5K6r0GGsZ6hnDUsHgEAAAAA>